Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/323830343a323961383a3a2f33322d3335203d3e20323634303237.roa
File:                     323830343a323961383a3a2f33322d3335203d3e20323634303237.roa (raw, json)
Hash identifier:          3lhkqCWFFchpYRK7DPnjHoDwRRmJMrIYsMT1YqRKf3c=
Subject key identifier:   DD:34:BF:28:79:FA:3C:12:D4:B6:B4:E6:52:50:6C:9C:A7:23:80:87
Certificate issuer:       /CN=E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58
Certificate serial:       67F1882153B61184B8B67617FD10EF5E64E62191
Authority key identifier: E1:A5:5D:C9:56:4F:C6:22:A0:F7:CA:B8:30:52:CF:D6:C9:CA:6C:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/323830343a323961383a3a2f33322d3335203d3e20323634303237.roa
Signing time:             Wed 03 Apr 2024 18:32:16 +0000
ROA not before:           Wed 03 Apr 2024 18:27:16 +0000
ROA not after:            Wed 02 Apr 2025 18:32:16 +0000
asID:                     264027
IP address blocks:        2804:29a8::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.crl
                          rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f1:88:21:53:b6:11:84:b8:b6:76:17:fd:10:ef:5e:64:e6:21:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58
        Validity
            Not Before: Apr  3 18:27:16 2024 GMT
            Not After : Apr  2 18:32:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:16:30:d0:ba:c2:90:94:5b:2d:e6:fa:d7:
                    3e:a9:2f:b5:71:21:f7:2f:b6:06:f3:ad:04:90:13:
                    7c:b5:62:70:3f:38:bd:f1:48:3e:96:4d:2e:09:ab:
                    47:84:50:d0:06:85:82:b8:3c:f5:dc:ed:f5:7f:41:
                    fa:1d:bf:e3:e3:0f:56:59:f2:83:b4:b4:b5:ef:04:
                    2f:0f:12:29:80:89:0e:7b:24:fd:ee:50:85:96:5f:
                    f1:a1:33:9f:53:c5:1f:93:9f:15:4d:f5:dc:d5:e8:
                    20:b1:01:b7:2a:e2:97:c3:16:02:a7:01:6f:28:a6:
                    01:88:eb:80:b2:6e:e7:e3:05:cd:83:b7:85:7e:42:
                    4d:69:ae:40:b9:ca:a9:84:d1:75:1f:6c:c0:7e:af:
                    54:8d:40:0b:8d:da:a4:54:73:90:1f:81:26:6d:77:
                    14:16:e2:22:59:f1:5a:0a:6c:88:67:ce:61:90:5c:
                    7b:9d:50:b7:f9:e7:97:8e:c8:b8:38:1f:3e:4b:55:
                    3f:b4:fd:48:d9:16:fd:33:5f:c8:b6:9d:5c:8a:85:
                    e4:02:4c:a5:8f:c8:7d:ad:f5:6c:eb:82:aa:a9:81:
                    e2:84:c3:bc:ee:f7:af:3f:c3:ec:e3:f9:d9:7d:6d:
                    c7:0b:e6:8c:1a:80:1e:44:38:a0:80:a1:e2:83:67:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:34:BF:28:79:FA:3C:12:D4:B6:B4:E6:52:50:6C:9C:A7:23:80:87
            X509v3 Authority Key Identifier:
                keyid:E1:A5:5D:C9:56:4F:C6:22:A0:F7:CA:B8:30:52:CF:D6:C9:CA:6C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/323830343a323961383a3a2f33322d3335203d3e20323634303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:f6:17:70:b6:64:e5:e2:cc:e2:01:bd:38:bc:06:3a:c9:7d:
         15:d6:75:73:86:b3:06:ac:b4:d0:db:0b:25:18:b4:14:7f:b5:
         de:b3:fa:cd:bc:ab:1f:e2:65:b5:d3:14:19:d9:8c:ed:bd:ce:
         5f:2f:6a:1e:41:3c:70:36:a0:cf:59:db:b0:56:3d:db:ba:f8:
         5f:c3:ff:db:50:d9:6e:bf:a3:d6:c2:c3:9a:b7:8d:23:91:a2:
         47:75:40:d9:a0:4c:0a:37:4a:44:9a:b8:bd:fb:a9:65:1d:6f:
         af:7f:04:7f:46:61:47:d7:65:d6:e0:04:ee:05:dd:ef:c0:0b:
         61:04:44:1d:ea:3c:58:99:0f:de:cd:9b:56:71:3c:67:2c:af:
         3f:11:cd:66:96:2a:c3:0e:f9:78:db:9a:a3:5c:a9:a1:1d:5b:
         c8:2e:42:02:8b:d1:1b:74:b3:6e:f2:2d:78:42:33:65:ad:ac:
         cc:76:14:a3:0e:89:5f:8c:f3:a2:e3:b5:24:0e:3c:c3:31:ff:
         65:d1:37:89:22:71:00:d8:67:5e:c9:65:4d:e6:cf:29:37:9c:
         29:4d:39:49:ef:56:43:f3:dc:ae:20:69:80:c9:b9:96:79:46:
         a5:c2:e5:9f:26:fd:0d:e0:79:b9:88:16:04:db:72:e1:83:2b:
         37:54:d5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org